The latest articles on DEV Community by DebtDraft (@debtdraft). https://dev.to/debtdraft https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4177977%2F5a35162b-794a-4c1d-bb03-03d6c9736473.png https://dev.to/debtdraft en DebtDraft Mon, 12 Oct 2026 01:08:02 +0000 https://dev.to/debtdraft/know-your-pull-requests-health-before-you-merge-it-78 https://dev.to/debtdraft/know-your-pull-requests-health-before-you-merge-it-78 <p>Most code health problems do not arrive in one big commit. They arrive one reasonable pull request at a time: a function that grows a little too complex, a dependency that falls behind, a change that ships without tests. By the time anyone notices, the problem is everywhere.</p> <p>DebtDraft is a GitHub Action that makes that visible at the moment it matters, <strong>inside</strong> the pull request.</p> <h2> What it does </h2> <p>On every pull request and every push to your default branch, DebtDraft scores your repository on five signals:</p> <ol> <li>Code complexity</li> <li>Test coverage</li> <li>Duplication</li> <li>Outdated dependencies</li> <li>Vulnerable dependencies</li> </ol> <p>The result is one score and one letter grade, posted as a single comment on the pull request. A separate section looks only at the lines the change touches, so you can see what this change did, not just the state of the whole repository.</p> <h2> Track it over time </h2> <p><a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fcjp94p04axobb3o1pqdl.png" class="article-body-image-wrapper"><img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fcjp94p04axobb3o1pqdl.png" alt="A screenshot of the dashboard tracking your repository health over time." width="800" height="433"></a></p> <p>A hosted dashboard shows every connected repository with its current grade and its trend. You can open a repository to see the score history, and open any scan to see which functions, files and dependencies are behind the number.</p> <h2> Setup </h2> <p>Add one step to your workflow, generate and add the API key, and commit the workflow. That's it!</p> <h2> Privacy </h2> <p>Secrets detection runs entirely on your runner, and secrets never leave it, not even to our own dashboard. Your source code is never uploaded. Privacy is not a privilege. It's a right.</p> <h2> Try it </h2> <p>DebtDraft is free for up to three repositories right now.</p> <ul> <li>Website: <a href="https://debtdraft.dev?utm_source=devto" rel="noopener noreferrer">https://debtdraft.dev?utm_source=devto</a> </li> <li>GitHub Marketplace: <a href="https://github.com/marketplace/actions/debtdraft" rel="noopener noreferrer">https://github.com/marketplace/actions/debtdraft</a> </li> </ul> <p>We would love to hear which signal matters most to your team!</p> github devops security testing